CVE-2026-72118

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race exists within the bcm rx handler() function when two CAN frames are received and processed simultaneously in a single rx operation by two different CPUs. This issue occurs because the rx statistics update and the frames filtered update in bcm rx changed() were performed in separate critical sections. For operations subscribed to all interfaces where ifindex is 0, concurrent execution can lead to a state where frames filtered is larger than frames abs, resulting in incorrect or negative reduction percentages in procfs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.